The central issue in this diversity case is whether, under Illinois law, North Park College (“North Park”) owed Suzanne Figueroa a duty to protect her from criminal attack.
In this appeal Figueroa and her husband argue that material issues of fact exist as to the existence of such a duty, so that the district court’s grant of summary judgment was premature. We conclude that none of the issues about which the parties remain in dispute are material issues of fact and that summary judgment was appropriate in this case.
I.
Evangelical Covenant Church, doing business as North Park College, owns a parking lot that adjoins the Northeastern Illinois University Child Care Center (“Center”). 1 Parents dropping their children at the Center frequently used this parking lot, a practice apparently approved by North Park informally prior to 1982 and then formally recognized in a letter dated March 18,1982. On the morning of May 12,1983, Figueroa was abducted at gunpoint from North Park’s parking lot after dropping her child off at the Center, and was subsequently sexually assaulted and slashed with a knife. She is suing North Park for its alleged negligent failure to provide adequate security in the parking lot. Her husband, Luis Figueroa, sues for loss of consortium in parallel counts.
North Park employed off-duty Chicago police officers to patrol its campus, including the parking lot. There was usually only one officer on duty at a time during the week. That officer patrolled the campus, reporting to particular buildings at designated times to lock and unlock doors. The security officers also concentrated on a foot bridge connecting the north and south campuses at times when the high school students from a neighboring school were likely to congregate there (morning, lunchtime and afternoon at the time high school classes ended). The college security office did make reports of any incidents that occurred on campus, but apparently did not keep records much longer than one or two years. 2 North Park security officers could *1430 recall only minor incidents occurring on campus before the time of the assault on Figueroa; the only incident occurring in the area of the parking lot involved “some kids” throwing bottles.
The district court granted summary judgment to the defendant, ruling that as a matter of law North Park owed no duty to Figueroa.
II.
In reviewing a grant of summary judgment we construe facts and draw inferences in favor of the nonmoving party, resolving against the movant any doubts about the existence of a genuine issue for trial.
Anderson v. Liberty Lobby,
Although the burden is on the moving party to demonstrate that no genuine issues of material fact remain, the nonmovant must go beyond the pleadings to affirmatively demonstrate the existence of genuine issues for trial.
Celotex Corp. v. Catrett, 477
U.S. 317, 324,
As a general rule, Illinois does not impose a duty to protect others from criminal attacks by third parties.
Boyd v. Racine Currency Exch.,
Figueroa claims that North Park owed her a duty under both the “invitee” and “voluntary undertaking” exceptions. Whether or not North Park owed Figueroa a duty is a question of law to be resolved by the court.
Ferentchak v. Village of Frankfort,
A.
We consider first whether North Park owed Figueroa a duty as an invitee. In 1984 Illinois passed the Premises Liability Act (“Act”), which abolished the common law distinction between invitees and licensees. Ill.Rev.Stat. ch. 80, para. 302 (1985). The Act became effective as of September 12, 1984. The Illinois appellate courts have since ruled that the Act is not to be applied retroactively.
Cerniglia v. Farris,
Illinois courts have applied a three-part test in determining whether a person qualifies as a business invitee:
A person is an invitee if: (1) he enters the premises of another by express or implied invitation; (2) his entry is connected with the owner’s business or with an activity the owner conducts or permits to be conducted on his land; and (3) there is a mutuality of benefit or a benefit to the owner.
Grimwood,
In order to qualify as an invitee, Figueroa must first demonstrate that she entered North Park’s property by express or implied invitation. The district court correctly notes that mere tolerance or acquiescence cannot under Illinois law constitute an invitation.
Figueroa v. Evangelical Covenant Church,
For the past two years North Park College has been pleased to share its parking facilities along Kimball Avenue and north of your church/school property with your current tenants — The Day Care Center and Art Department of Northeastern University.
To give as much notice as possible we want to put on record the fact that in our Master Plan for Campus Development this parking facility will be converted to other uses and, therefore, not available to the present users.
Defendant’s Motion for Summary Judgment, Ex. 7. There is some indication in the record that a North Park official had had prior communications with the pastor of the church about church use of the parking lot. Id. Ex. 6 at 51. It is not clear what kind of prior communication any official of the school had had with the church or the Center about the Center’s use of the parking lot, but the issue is at least minimally raised by the testimony of one school official that an informal arrangement had been in place for some time before 1980. Id. at 5, 52.
The oral and written communications from North Park go considerably beyond the mere absence of objection usually characterizing “acquiescence.” Yet the Illinois cases in which plaintiffs were found to be invitees generally have involved a more clearcut invitor-invitee relationship—as, for example, between stores or restaurants and their customers,
see Wilson v. Clark Oil & Refining Corp.,
Similarly, there is some question as to the second element of the “invitee” test, which requires that entry be “connected with the owner’s business or with an activity the owner conducts or permits to be conducted on his land.”
Grimwood,
130
*1433
Ill.App.3d at 710,
However, Figueroa must also have adduced some minimal support for her contention that she can satisfy the third element of the “invitee” test — mutuality of benefit or benefit to North Park. This is the criterion upon which Illinois courts have relied most consistently in determining invitee status, even before the more modern three-part test was articulated.
6
See Ellguth v. Blackstone Hotel, Inc.,
B.
The remaining counts charge North Park with negligence under two alternate versions of the “voluntary undertaking” theory. In Counts III and IV the plaintiffs allege that North Park’s Security Department and its procedures increased the risk of danger to Figueroa. Counts V and VI delete allegations of increased risk based upon the Illinois Supreme Court’s holding in
Phillips v. Chicago Housing Auth.,
Illinois courts have apparently taken two different approaches to imposing liability under the voluntary undertaking exception. The difference is perhaps best illuminated in
Pippin v. Chicago Hous. Auth.,
In Nelson v. Union Wire Rope Corp., ... this court gave its recognition to the established principle that liability can arise from the negligent performance of *1434 a voluntary undertaking. The court utilized this principle to impose liability against an insurer for personal injuries suffered as a result of the insurer’s negligent performance of a gratuitous inspection of the premises where the injuries occurred.
Pippin,
This difference in approach is hardly surprising, because section 324A specifically deals with “[o]ne who undertakes, gratuitously or for consideration, to render services to another which he should recognize as necessary for the protection of a third person or his things....” Restatement (Second) of Torts § 324A (1965). This provision was applicable to the
guard service
in
Pippin
because the service undertook to render services
for the CHA
that were obviously for the protection of third parties, here the CHA’s tenants and their guests.
8
See also Scott & Fetzer Co. v. Montgomery Ward & Co.,
The doctrine adopted from Nelson by the supreme court has its roots in the original Restatement of Torts, which provides:
(1) One who gratuitously renders services to another, otherwise than by taking charge of him when helpless, is subject to liability for bodily harm caused to the other by his failure, while so doing, to exercise with reasonable care such competence and skill as he possesses.
Restatement of Torts § 323(1) (1934), quoted in part in
Nelson,
We think it clear under the law that defendant’s liability for the negligent performance of its undertaking, as distinguished from a failure to perform, is not limited to such persons as might have relied upon it to act but extends instead to such persons as defendant could reasonably have foreseen would be endangered as the result of negligent performance. ... [Sjuch duty does not depend upon contract, privity of interest or the proximity of relationship, but extends to remote and unknown persons.
Nelson,
Although the second Restatement subsequently altered the provisions of sections 323 and 325, the Illinois Supreme Court in
Pippin
simply adopted the
Nelson
rationale, which was derived from the first Restatement.
9
Thus, while the second Restatement would require either a showing of increased risk or of reliance, Illinois has not to date adopted the reasoning of section 323 of the newer Restatement. Indeed, in
Phillips,
the supreme court explicitly refused to require a showing of increased risk before imposing liability on the CHA for a criminal attack upon one of its tenants, citing
Nelson
and
Pippin. Phillips,
Although Pippin and Phillips clearly do not require a showing of reliance or of increased risk in order to meet the “voluntary undertaking” exception, they do require that any duty assumed be limited strictly to the scope of the undertaking— and they follow Nelson (and many other voluntary undertaking cases) in requiring that the injury sustained be reasonably foreseeable. In a sense, these two requirements are simply different expressions of the same policy, because whether or not a duty to protect against a particular injury falls within the scope of the actor’s undertaking depends in large part upon whether that injury was a reasonably foreseeable consequence of the actor’s negligent performance of the duty originally undertaken.
*1436 We must therefore begin by inquiring whether North Park voluntarily undertook a duty to protect Center patrons such as Figueroa, and, if so, whether protection against attacks such as the one involved in this case fell within the scope of any duty assumed. The district court, based on almost unanimous testimony by North Park security officers to that effect, concluded that North Park had gratuitously undertaken to provide protection for all persons lawfully on the premises. For purposes of this summary judgment motion, where all inferences are to be drawn in favor of the nonmovant, the court’s conclusion was clearly correct. In a somewhat puzzling attempt to cast doubt upon the district court’s approach, plaintiffs urge that even this conclusion, drawn as favorably as possible to their case, was incorrect. Plaintiffs maintain that a material issue of fact remains in dispute, pointing to the testimony of the director of security at North Park, Harry Tannehill, who said that the purpose of the security department was “protection of the students, staff, protection of property on campus. Visible patrol.” Defendant’s Motion for Summary Judgment, Ex. 6. In the plaintiffs’ view, this conflicts with testimony from a number of North Park security officers who testified that the security department also protected other persons lawfully on campus. Plaintiffs’ Memo, in Opp., Ex. 18 (duty was “as possible, to protect the people on the college campus”); Ex. 19 (duty was “to take proper police action” in case of criminal activity on campus); Ex. 20 (duty extended to persons on campus other than North Park students or personnel); Ex. 21 (duty was to stop crime taking place “no matter who the person was”); Ex. 23 (duty to provide security extended to any persons coming on the campus); Ex. 24 (protection extended to “any persons that are on the grounds, whether they’re students or faculty or whether they’re citizens just walking through the grounds”); Ex. 25 (security provided for any “authorized visitor” or “guest”). The North Park official in charge of all non-academic affairs (including the security department) also testified that protection extended to any people “legitimately on the campus.” Id. at Ex. 17.
A careful reading of all the depositions reveals that there is no conflict. A number of the security officers, when first asked about the purpose of the security department, replied that its purpose was to protect the students and staff of the College. See id. at Exs. 21, 23, 24, 25. However, when subsequently asked whether protection also extended to people on campus who were not members of the College community, these same officers replied that it did. There is no necessary conflict between asserting, on the one hand, that the primary purpose of a college security department is protection of college personnel, and on the other, that the protection afforded by this department extended to others. 10 Tanne-hill did not deny that protection extended to others, and so his testimony was not in conflict with that of other officers. No material issue of fact remains that would require remand to a jury. The district *1437 court correctly concluded, drawing infer-enees in the Figueroas’ favor, that North Park had undertaken a duty to protect those lawfully on campus.
The next issue, then, is whether the scope of the duty undertaken by North Park extended to the kind of crime involved in this case. The Illinois Supreme Court in
Pippin
carefully constricted the scope of duties voluntarily assumed, limiting the CHA’s liability in that case to any demonstrable negligence in its
hiring
of the security service (as that was the extent of the CHA’s undertaking).
On the other hand, North Park did not merely undertake to repair a burglar alarm or hire a security agency; nor did it undertake only to provide protection as to one particular part of the campus. And where a more general duty to provide security is involved, Illinois courts have not hesitated to impose liability when negligently-performed security measures failed to prevent crime.
See Phillips v. Chicago Hous. Auth.,
89.Ill.2d 122,
The “foreseeability” requirement is clearly stated in
Nelson,
in which the Illinois Supreme Court imposed a duty “to guard against injury which naturally flows as a reasonably probable and foreseeable consequence” of a negligently-performed act.
Plaintiffs have not come forward with any evidence to suggest that an attack remotely resembling the one in this case had occurred anywhere on North Park property, let alone in the campus area around the parking lot, prior to the attack *1439 on Figueroa. (There was evidence of an abduction after Figueroa’s attack, but that obviously does not demonstrate foreseeability of the prior attack.) We reach this conclusion only after careful examination of all of the documents submitted (including the police reports, but see supra note 2). The most serious alleged incidents occurring before the time of the attack on Figueroa involved high school students “harassing” female students around the bridge area of campus. See, e.g., Plaintiffs’ Memo, in Opp. Ex. 13. Plaintiffs argue that North Park was negligent in directing officers to concentrate on the area around the bridge (as opposed to that around the parking lot) at certain times, but the only potentially dangerous incidents of which North Park was on notice occurred in the bridge area. North Park responded by taking additional precautions to prevent reasonably foreseeable harm. Vague allegations of • “crimes against persons” at unspecified times and in unspecified places about which witnesses can remember no details do not raise an issue of material fact as to foreseeability. An incident of similar severity was unlikely to have gone undocumented by the police, but none of the police reports from that time period contain evidence of attacks of a similar nature on North Park property putting North Park on notice of potential danger in the area of the parking lot. Because no issue of material fact as to foreseeability remains for trial, North Park is entitled to summary judgment on the “voluntary assumption” claims.
III.
Because no material issues of fact remain either as to Figueroa's invitee status or as to North Park’s voluntary assumption of a duty to protect from the kind of attack involved in this case, the judgment of the district court is
Affirmed
Notes
. Northeastern Illinois University leased the building in which the Center was located from the Yugoslavian Seventh Day Adventist Church.
. As a matter of common sense, any serious assault or incident would most likely be referred to the Chicago police, so that reports would then be available through the Police Department. Although plaintiff has presented a number of police reports dating back to 1980, only two appear to have involved North Park College in any way and neither was sufficiently similar to the Figueroa incident to have relevance in this case. (We reviewed this evidence *1430 carefully and in the light most favorable to the plaintiffs, but we pause to note that the district court was within its rights to require more guidance from the plaintiffs’ attorney. The court was not obliged to obtain its own city map and track the incident reports with an eye to determining which of them occurred in the vicinity of the parking lot. Yet without such a calculation the police reports were of little use, for if they indicated incidents occurring near a different point on campus — perhaps near the bridge— they might actually provide justification for a decision by North Park to patrol those areas in preference to the parking lot. Even while urging us to consider these reports as evidence, plaintiffs’ brief on appeal at no point indicated with sufficient specificity why or how we should.)
. Section 343 of the Restatement (Second) provides that landowners may be liable to invitees for conditions involving an unreasonable risk of harm; imposition of this provision obviously requires a prior finding of invitee status. Sections 448 and 449 provide that actors whose negligence affords the possibility for criminal or tortious conduct by third parties may be held liable. However, where the likelihood that the third party will act in a criminal way is one of the factors that renders the actor negligent in the first place, the Restatement does not impose liability in the absence of a preexisting duty. Restatement (Second) of Torts § 449, comment a. ("... the mere possibility or even likelihood that there may be such [criminal] misconduct is not in all cases sufficient to characterize the actor’s conduct as negligence. It is only where the actor is under a duty to the other, because of some relation between them, to protect him against such misconduct, or where the actor has undertaken the obligation of doing so, or his conduct has created or increased the risk of harm through the misconduct, that he becomes negligent.");
see abo Fancil,
. Even if Figueroa could qualify as an "invitee,” she would have to demonstrate that the harm here was reasonably foreseeable, another requirement as to which plaintiffs have failed to meet their threshold burden (see infra II.B.).
. Illinois courts have also analyzed acquiescence when attempting to distinguish trespassers from licensees. Discussions of acquiescence in these cases have similarly focused on situations in which the landowner took no action and failed to communicate with the person coming onto his or her property.
See Mentesana v. LaFranco,
. Although earlier cases often required that the benefit be an economic one, the trend for some time has been away from requiring a strictly economic benefit.
See Madrazo,
. There is a tendency to analyze Illinois landlord-tenant cases under the "voluntary undertaking" doctrine because the landlord-tenant relation cannot be otherwise described as a "special relationship” under Illinois law; for this reason, many of the Illinois voluntary undertaking cases involve landlords and tenants. A number of these cases have been ultimately decided on bases peculiar to the landlord-tenant relationship (as, for example, the landlord’s duty to keep common areas of the building or areas under his or her control reasonably safe), and thus do not give much guidance in the case before us.
See, e.g., Rowe,
. Some confusion arises because of the use of the term "third person” in two different contexts; section 324A speaks of protection owed to a third person, while section 448 (and the cases dealing with criminal acts by third parties) speak of a duty to protect from criminal acts of third parties. When section 324A is applied to situations in which a duty of protection from criminal acts is owed to a third person, there tire of course four parties involved (the party assuming a duty to provide protection, the parly from whom that duty is assumed, the party to whom the duty is owed and the party performing the criminal act). Section 324A is not triggered when only one protector, a protectee and a criminal are involved.
. The second Restatement collapses section 325 into section 323, which as amended reads:
One who undertakes, gratuitously or for consideration, to render services to another which he should recognize as necessary for the protection of the other’s person or things, is subject to liability to the other for physical harm resulting from his failure to exercise reasonable care to perform his undertaking, if
(a) his failure to exercise such care increases the risk of harm, or
(b) the harm is suffered because of the other’s reliance upon the undertaking.
Restatement (Second) of Torts, § 323 (1965). The old distinction between misfeasance and nonfeasance has apparently been abolished.
. We are not faced with the difficult case in which a protector with limited resources might have to choose, in deploying safety personnel, between the people for whom the protective service was primarily designed (here, faculty, staff and students) and those to whom it was secondarily extended (here, other persons lawfully on campus). Had North Park had notice of highly dangerous situations occurring in two different locations — one of which was primarily frequented by students and the other primarily by Center staff and parents — then we might be faced with the difficult policy issue whether this difference between "primary" and "secondary" beneficiaries should matter in determining the extent of the duty undertaken. However, North Park had no notice of serious problems in the area of the parking lot, and there is no reason to believe that North Park personnel did not also frequent the area of the parking lot. Thus we do not reach the issue whether the difference articulated by the security guards between their primary goal (protection of North Park students and personnel) and their extended duty (protection of anyone lawfully on the premises) should affect the outcome here. Plaintiffs also contend that the assailants were present in the parking lot for up to an hour before the assault, thereby putting North Park on notice of the potential danger to Figueroa. In the absence of any history of serious problems in the parking lot, North Park had no duty to patrol the area on an hourly or semi-hourly basis; hence whether the assailants were present for an hour before the attack is essentially irrelevant to the foreseeability analysis here.
. Although not directly on point, the cases dealing with police officers’ potential liability under section 324A evince a similar recognition of the difficulties inherent in imposing upon those who undertake to provide security protection an absolute duty to protect from all possible harm:
The general rule [declining to impose such a duty] arises from an understanding that it is difficult to prevent crime and it is still more difficult to prove whether a crime could have been prevented.... In sum, the general trend of Illinois courts is against a liberal interpretation of the exceptions to the general rule of police non-liability for failure to prevent crime....
LeRose v. City of Zion/Police Dep’t,
. Even if an injury is foreseeable, Illinois imposes a further restriction:
It is important to recognize that the imposition of a duty is an exercise of judicial policy *1438 making.... “In determining whether the law imposes a duty, foreseeability of possible harm alone is not the test, for in retrospect almost every occurrence may appear to be foreseeable. The likelihood of injury from the existence of the condition, the magnitude of guarding against it, and the consequences of placing the burden upon the defendant must be taken into account.”
McColgan,
